Overview

overview

10

Static

static

10

626998c3dd...a8.exe

windows7_x64

10

626998c3dd...a8.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    626998c3dd9fa7fff9c53ebce0aa1c01d92ac4317efd466c8645ddbe2fceaea8

  • Size

    233KB

  • Sample

    220129-h8rafsfhc4

  • MD5

    60586b6f510cfc8b43878e1a2a7deed4

  • SHA1

    b0c86c18cbe5ef0d32c8bd937ead5a9c71419422

  • SHA256

    626998c3dd9fa7fff9c53ebce0aa1c01d92ac4317efd466c8645ddbe2fceaea8

  • SHA512

    324888c2edd8b91df6caa435d1637673f927b22073a4b9d4618de60f802e3cabc5795b2a49efcb48f62cf052a2fd175334607759e2a421008b179f997d8ff584

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      626998c3dd9fa7fff9c53ebce0aa1c01d92ac4317efd466c8645ddbe2fceaea8

    • Size

      233KB

    • MD5

      60586b6f510cfc8b43878e1a2a7deed4

    • SHA1

      b0c86c18cbe5ef0d32c8bd937ead5a9c71419422

    • SHA256

      626998c3dd9fa7fff9c53ebce0aa1c01d92ac4317efd466c8645ddbe2fceaea8

    • SHA512

      324888c2edd8b91df6caa435d1637673f927b22073a4b9d4618de60f802e3cabc5795b2a49efcb48f62cf052a2fd175334607759e2a421008b179f997d8ff584

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks